HighVulnerability
CVE-2026-57208: Entire CLI path traversal via SessionID in checkpoint restore
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-57208
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
CVE-2026-57208 affects Entire CLI before version 0.7.7, a tool that hooks into Git workflows to capture AI agent sessions. An attacker with push access to the checkpoints repository can craft checkpoint metadata whose SessionID field is used unvalidated to build filesystem paths in the entire session resume or entire checkpoint rewind restore path, causing attacker-controlled transcript data to be written outside the expected session directory and potentially overwriting arbitrary files on the victim's machine.
Mitigation
Fixed in 0.7.7.
Topics
Related items
- MediumExposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsSimilar attack · The Hacker News
- MediumInfostealer riding the AI TrainSimilar attack · Check Point Research
- HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSimilar attack · NVD/CVE Database
- MediumGitLab critical patches include one for a bug that allows code execution by unauthenticated usersSimilar attack · CSO Online
- HighCVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerSimilar attack · AWS Security Bulletins